Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

vegas16.zip

windows7-x64

1

vegas16.zip

windows10-2004-x64

1

Resubmissions

11/08/2024, 17:19

240811-vv97maygnk 1

11/08/2024, 17:18

240811-vvkxqstcpc 1

11/08/2024, 17:16

240811-vtdr2ayfql 1

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/08/2024, 17:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    vegas16.zip

  • Size

    50.7MB

  • MD5

    09640cfd11b674962380216f36092f35

  • SHA1

    8fcb73e24dcb94a4dc8c8fa84d6c2fd82985f30b

  • SHA256

    9364c72a9a466da322cb436a36c9b641b11f8fdab72e48c56d5f90b5f140b47b

  • SHA512

    f99ede106e8bc645ecd7c9e77e994b588c90e685289232cfe2f2a4d39f33ef5a616367bd4177a826a1b344e2f6761b5e5f6661591c38a25a047758ae0f103585

  • SSDEEP

    1572864:GDplTsTfnRQGZCIws4eakVLpl50LC1JfbE:GdlTWnZkIws4eV2Ld

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\vegas16.zip
    1⤵
      PID:4276
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4672
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\" -an -ai#7zMap29819:72:7zEvent22624
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:4032
      • C:\Windows\system32\NOTEPAD.EXE
        "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\vegas16\MAGIX VEGAS Pro 16.0.0.424 (x64) Multilingual\Crack\R2R.txt
        1⤵
          PID:4272
        • C:\Windows\system32\NOTEPAD.EXE
          "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\vegas16\MAGIX VEGAS Pro 16.0.0.424 (x64) Multilingual\Readme.txt
          1⤵
            PID:3708

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads